PT-2006-1507 · Text Rider · Text Rider

Aliaksandr Hartsuyeu · Published 2006-01-26 · Updated 2018-10-19 · CVE-2006-0440

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Text Rider version 2.4

Description The issue allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password, then including the hash in a cookie.

Recommendations For Text Rider version 2.4, consider disabling the authentication bypass functionality until a patch is available. Restrict access to file upload features to minimize the risk of exploitation. Avoid using the MD5 hash of the password in cookies until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-0440

Affected Products

Text Rider

References · 4

• 🔥 http://evuln.com/vulns/46/summary.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0440 · Security Note
• http://securitytracker.com/id?1015533 · Note
• http://securityfocus.com/archive/1/423130/100/0/threaded · Note